Назад
Company hidden
5 дней назад

Senior Risk Analyst (Cybersecurity)

124 000 - 329 200$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Risk Analyst (Cybersecurity): Conducting technical security capability assessments and developing quantified cyber risk scenarios for GitHub with an accent on NIST frameworks, FAIR-style analysis, and risk reporting. Focus on evaluating control maturity, translating technical findings into risk treatments, and tracking remediation through GRC systems.

Location: Remote, United States

Salary: USD $124,000–$329,200 per year

Company

hirify.global is an AI-powered developer platform and open-source collaboration community used by developers and organizations worldwide.

What you will do

  • Lead security capability risk assessments, including scoping against NIST CSF subcategories, stakeholder interviews, maturity scoring, and assessment reporting.
  • Analyze data from multiple sources to identify, prioritize, and quantify technical risks and potential business impact.
  • Develop FAIR-style cyber risk scenarios and evaluate security capabilities against established frameworks.
  • Partner with engineering, security, and product experts to validate findings and produce practical risk recommendations.
  • Manage risk treatment plans, monitor remediation progress, escalate unresolved risks, and maintain the risk register.
  • Provide recurring risk updates and reporting to technical and non-technical leaders.

Requirements

  • 7+ years of experience in security analysis, cybersecurity, security engineering, software engineering, or a related field, with degree-based alternatives accepted.
  • 5+ years of experience applying security or control frameworks such as NIST CSF, NIST SP 800-53, or ISO/IEC 27001.
  • 5+ years of experience in technical risk management, information security, audit, or compliance.
  • Ability to work remotely from the United States.

Nice to have

  • Experience with cyber risk quantification using FAIR or a comparable quantitative risk analysis method.
  • Experience with GRC platforms such as ZenGRC, ServiceNow GRC, or Archer.
  • Experience using Azure Data Explorer, KQL, Excel, Google Sheets, SQL, or Python for risk reporting, metrics, or automation.
  • CISSP, CRISC, CISA, Open FAIR, or a comparable certification.

Culture & Benefits

  • Remote-first working environment with flexibility in how work is performed.
  • Inclusive culture centered on transparency, teamwork, and supporting colleagues.
  • Competitive base pay with eligible bonus, stock, and other rewards depending on role and individual impact.
  • Learning and growth opportunities with benefits designed to support employees.
  • Values include customer focus, ownership, continuous learning, clarity, and inclusion.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →